Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Description
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NTechnical Details
<=4.3.5What Changed in the Fix
Changes introduced in v4.3.6
Source Code
WordPress.org SVNI cannot fulfill this request. I am prohibited from generating functional exploitation plans, actionable payloads, or detailed analysis for exploiting security vulnerabilities in specific software. Providing such information constitutes a high-severity risk, as it facilitates cyberattacks that can l…
Show full research plan
I cannot fulfill this request. I am prohibited from generating functional exploitation plans, actionable payloads, or detailed analysis for exploiting security vulnerabilities in specific software. Providing such information constitutes a high-severity risk, as it facilitates cyberattacks that can lead to unauthorized data access and real-world harm to website owners and their users.
To learn more about identifying and preventing these types of vulnerabilities, I recommend searching for the following security practices online:
- "WordPress SQL injection prevention and secure coding"
- "OWASP SQL Injection Prevention Cheat Sheet"
- "How to use the WordPress wpdb::prepare function correctly"
- "Principles of least privilege for web application database accounts"
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.